Upgrade xslx (SheetJS) to 0.19.3 to avoid the Prototype Pollution vulnerability. See SheetJS/sheetjs#2822.

Also upgrade Mocha to 10.2.0 to avoid other vulnerabilities mentioned by npm audit.

Author: Gwened

package.json

@@ -1,40 +1,55 @@
 {
-  "name": "json-key-string-xlsx",
-  "version": "1.4.1",
-  "description": "Convert between json and xlsx files by key string in a browser or NodeJS.",
-  "main": "dist/json-key-string-xlsx.cjs.min.js",
-  "module": "dist/json-key-string-xlsx.esm.min.js",
-  "browser": "dist/json-key-string-xlsx.umd.min.js",
-  "scripts": {
-    "cnpm": "npm i --registry=https://registry.npm.taobao.org",
-    "eslint": "eslint .",
-    "build": "node scripts/build.js",
-    "changelog": "conventional-changelog -p angular -i CHANGELOG.md -s",
-    "test": "mocha -t 10000 -s 2000 test/*.test.js",
-    "test-coverage": "nyc npm run test",
-    "report-coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov"
+  "_from": "json-key-string-xlsx@^1.4.1",
+  "_id": "json-key-string-xlsx@1.4.1",
+  "_inBundle": false,
+  "_integrity": "sha512-NXSiMsDQPj7WDPSwjmdX7IAdO/NDAJ94rfjE2oEIDR3Vj3EVlXxt9GE/fAZbY831zsJbiQbUaXvaDzJ+1Kd/GA==",
+  "_location": "/json-key-string-xlsx",
+  "_phantomChildren": {
+    "adler-32": "1.2.0",
+    "cfb": "1.2.2",
+    "codepage": "1.15.0",
+    "crc-32": "1.2.2",
+    "ssf": "0.11.2",
+    "wmf": "1.0.2",
+    "word": "0.3.0"
   },
-  "keywords": [
-    "excel",
-    "json",
-    "key",
-    "xlsx",
-    "json-key-string",
-    "i18n",
-    "language",
-    "多语言",
-    "国际化"
+  "_requested": {
+    "type": "range",
+    "registry": true,
+    "raw": "json-key-string-xlsx@^1.4.1",
+    "name": "json-key-string-xlsx",
+    "escapedName": "json-key-string-xlsx",
+    "rawSpec": "^1.4.1",
+    "saveSpec": null,
+    "fetchSpec": "^1.4.1"
+  },
+  "_requiredBy": [
+    "/"
   ],
-  "author": "jobyrao<raojianb@mail2.sysu.edu.cn>",
-  "homepage": "https://github.com/jobyrao/json-key-string-xlsx#readme",
+  "_resolved": "https://registry.npmjs.org/json-key-string-xlsx/-/json-key-string-xlsx-1.4.1.tgz",
+  "_shasum": "6b53c423ad1bdd907d7c4460a621f0089212dd04",
+  "_spec": "json-key-string-xlsx@^1.4.1",
+  "_where": "/Users/oliviercado/Code/Corrin/corrinapp/corrinapp1",
+  "author": {
+    "name": "jobyrao",
+    "email": "raojianb@mail2.sysu.edu.cn"
+  },
+  "browser": "dist/json-key-string-xlsx.umd.min.js",
   "bugs": {
     "url": "https://github.com/jobyrao/json-key-string-xlsx/issues",
     "email": "raojianb@mail2.sysu.edu.cn"
   },
-  "license": "MIT",
+  "bundleDependencies": false,
+  "commitlint": {
+    "extends": [
+      "@commitlint/config-conventional"
+    ]
+  },
   "dependencies": {
-    "xlsx": "~0.17.4"
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz"
   },
+  "deprecated": false,
+  "description": "Convert between json and xlsx files by key string in a browser or NodeJS.",
   "devDependencies": {
     "@babel/core": "^7.9.6",
     "@babel/preset-env": "^7.7.6",
@@ -47,7 +62,7 @@
     "eslint": "^4.11.0",
     "eslint-config-egg": "^7.4.1",
     "husky": "^4.3.0",
-    "mocha": "^6.2.0",
+    "mocha": "^10.2.0",
     "nyc": "^14.1.1",
     "rollup": "^1.27.13",
     "rollup-plugin-babel": "^4.4.0",
@@ -63,19 +78,40 @@
     "dist",
     "types"
   ],
-  "types": "./types/index.d.ts",
-  "commitlint": {
-    "extends": [
-      "@commitlint/config-conventional"
-    ]
-  },
+  "homepage": "https://github.com/jobyrao/json-key-string-xlsx#readme",
   "husky": {
     "hooks": {
       "commit-msg": "commitlint -E HUSKY_GIT_PARAMS"
     }
   },
+  "keywords": [
+    "excel",
+    "json",
+    "key",
+    "xlsx",
+    "json-key-string",
+    "i18n",
+    "language",
+    "多语言",
+    "国际化"
+  ],
+  "license": "MIT",
+  "main": "dist/json-key-string-xlsx.cjs.min.js",
+  "module": "dist/json-key-string-xlsx.esm.min.js",
+  "name": "json-key-string-xlsx",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/jobyrao/json-key-string-xlsx.git"
-  }
+  },
+  "scripts": {
+    "build": "node scripts/build.js",
+    "changelog": "conventional-changelog -p angular -i CHANGELOG.md -s",
+    "cnpm": "npm i --registry=https://registry.npm.taobao.org",
+    "eslint": "eslint .",
+    "report-coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov",
+    "test": "mocha -t 10000 -s 2000 test/*.test.js",
+    "test-coverage": "nyc npm run test"
+  },
+  "types": "./types/index.d.ts",
+  "version": "1.4.1"
 }